PT-2022-18732 · Unknown · Rg-Nbr-E Enterprise Gateway Rg-Nbr2100G-E

Published 2022-05-02 · Updated 2022-05-10 · CVE-2022-27982

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RG-NBR-E Enterprise Gateway RG-NBR2100G-E (affected versions not specified)

Description A remote code execution issue was discovered, allowing exploitation via the fileName parameter at the "/guest auth/cfg/upLoadCfg.php" API endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-27982

Affected Products

Rg-Nbr-E Enterprise Gateway Rg-Nbr2100G-E

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-27982 · Security Note
• https://adminxe.com/3651.html · Note
• https://t.me/cibsecurity/41729 · Telegram Post
• https://t.me/cvenotify/29968 · Telegram Post